fix cross-domain json issue